Here is the condition: I have a web service API that I am planning to sell as a service. The output of the API contains URI of some resources (say images, videos) that should be accessible to that guy using API.
Exposing URI as is, seems like a bad idea since they can just visit that resource and navigate through.
What I tried?
Selective Passsword protecting the URI resources from apache server configuration. But this would prevent every client from displaying those resources.
What others are doing?
I just looked at how facebook was doing this and it seems they have some sort of encrypted URL for image resources.
Following is an example I got from Barack Obama's FB page:
https://scontent.fblr1-1.fna.fbcdn.net/v/t1.0-9/14925612_10154300250296749_7922327253356496348_n.png?oh=54935f1f517c995295580b55a9a058a0&oe=5925CCFC
How do I achieve this level of security? what are the standard practices and how should I go about implementing them? Any leads would be appreciated!!